基于门限属性加密的安全分布式云存储模型  

Secure and distributed cloud storage model from threshold attribute-based encryption

作　　者：吴胜艳[1] 许力[1] 林昌露[1] 

机构地区：[1]福建师范大学网络安全与密码技术福建省高校重点实验室,福州350007

出　　处：《计算机应用》2013年第7期1880-1884,1902,共6页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61072080;61103247);福建省自然科学基金资助项目(2011J05147);福建师范大学青年骨干教师资助项目(fjsdjk2012049);福建省2013年战略性新兴产业技术开发项目(闽发改高技[2013]266号)

摘　　要：针对云存储存在越来越多的安全问题,设计了一种新的基于门限属性加密的安全分布式云存储模型。该模型由加密、存储、解密三个阶段组成且均具有分布式特点。利用基于属性加密体制不仅提高数据存储的安全性,而且多属性服务器的模式也使得该模型能支持门限解密功能及任意个属性服务器的加入与撤出问题;在存储阶段使用的分布式删除码可充分保障模型的健壮性,且该模型能抵抗共谋攻击。在一些特有云环境中,该模型可向用户提供较好的安全云存储服务。Since there are more and more security issues in cloud storage, this paper designed a new secure and distributed cloud storage model based on the threshold Attribute-Based Encryption （ABE）. Three phases in the model included： the encryption phase, the data storage phase and the decryption phase, and all messages in these phases were distributed through the whole process. It not only enhanced the security of the storage data by using the ABE but also supported the threshold decryption and allowed to add or remove the arbitrary attribute authorities, with the use of the multi-attribute authorities method in the model. In the data storage phase, this paper used the distributed erasure code to improve the robustness of our model and this model could resist against collusion attack. It can be applied in some special cloud situations and provides secure cloud storage service for users.

关 键 词：分布式云存储 云计算 门限属性加密 纠删码 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]